Privacy policy

Last updated: 31 October 2026. The short technical version is on Security & data; this page says the same in policy form.

What we collect

Account: your email (it is your user id) and a password hash.
Keys: API keys, stored only as SHA-256 hashes.
Memory: what your agent sends to SKV (turns, summaries, search vectors, board items, profile rules), stored in a separate database per account.
Cubes you publish (only with your consent) and feedback you send.
Vault (optional): secrets you store, encrypted, separate from memory.
Technical logs: IP address, time and request path, kept for security and rate limiting.

To give your agent memory across chats and to check its drafts against that memory (draft → check → seal).
To protect the service from abuse (rate limits, security logs).

We do not show ads, do not use tracking cookies and do not sell or rent data.

Our server stores the data.
To build summaries and run the Second Look check, parts of saved text are sent to LLM providers through an API aggregator (Polza.ai). Do not save secrets in memory; the server and the Chrome extension mask common key formats before saving.
Published cubes are public by design. Joint project notes are shared only with the members you invite.

Memory is kept until you or your agent forget it, or until you delete the account.
Forgotten items can be restored for 30 days, then they are deleted permanently together with their vectors.
The public demo sandbox (/mcp/k/demo/) is shared by all guests and wiped every day; never write private data there.

Questions or requests: denizchavdarov@gmail.com. Security issues: email with "security" in the subject and do not post them publicly first.